[29161] in North American Network Operators' Group
W2k Kerberos Secure Channel & Firewall
daemon@ATHENA.MIT.EDU (Tom)
Tue Jun 13 20:09:10 2000
Message-ID: <3B992D6A8728D411BAF500500484F66C01022139@mailserver1.bonzi.com>
From: Tom <tom@bonzi.com>
To: nanog@merit.edu
Date: Tue, 13 Jun 2000 17:03:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Errors-To: owner-nanog-outgoing@merit.edu
Does anyone have a idea howto/where to find info on setting up a W2k
Kerberos trusted domain through a PIX firewall. One of the Domain
Controllers is statically NAT'd and the other is publicly routable. Kerberos
it appears is not allowing a secure channel to be created (because of the
NAT I think) is there a way to modify the Kerberos address info as it
traverses the firewall?
Any ideas/urls/thoughts/resources would be appreciated.
Thanks
Tom
ps: they are both seperate Active Directory Domains.
